last executing test programs: 1m14.026653386s ago: executing program 32 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000140)) 52.198852331s ago: executing program 3 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="2e1221b23bb601c494d3df173e75fe0100dd9d904901f665b773953519da1abb67e4ccdfabbb4d04ef", 0x29}, {&(0x7f0000000080)="0400000002e877da3002473500000003467b5dc4", 0x14}, {&(0x7f0000000100)="6e1d9afe29a908435413b7ae0371167073ca1266dddc8f1bdc85dd6d5704d94766ac08fee359e7d3048690089aaffa8e265d525faa19f70c48215f5fe890978da4ac566c534f80b84007896f87b591793225320ca636db5db5a222d4df21bf6c275d22221f805052c4aa97414699e37dc9a81d3af6e16743b14362e70e9abb306fb85f93e371502076e9c05b32f1a4795dd1a1e6bdfd7e2443a9ae1c6c6800cb19832b9bf390364e9c7496a43cea1b090000", 0xb2}], 0x3) 52.111491215s ago: executing program 3 (id=662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 52.088789386s ago: executing program 3 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0xcf2, 0x4, 0x0, 0x0, @adapter={0x6, 0x1, 0x9, 0x7, 0x8000}}]}) 52.01339999s ago: executing program 3 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$ptp(r0, &(0x7f00000001c0)=""/3, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 51.990077971s ago: executing program 3 (id=666): r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) 51.775688991s ago: executing program 3 (id=669): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 51.745802353s ago: executing program 33 (id=669): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 49.443171273s ago: executing program 2 (id=730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c00263c0004dbb8a13d6d2183499c3a0a9070ec", 0x29}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d098", 0x14}], 0x2) 49.380945346s ago: executing program 2 (id=732): mount(0x0, 0x0, &(0x7f0000000100)='gfs2\x00', 0x8, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 49.309921259s ago: executing program 2 (id=734): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x20008, 0xd, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 49.151200957s ago: executing program 2 (id=746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x11, 0x3, "f35cd1"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x14, 0xd, "b23c926b21fd9fca6f67eee06d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.508348183s ago: executing program 2 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 46.403661998s ago: executing program 2 (id=779): socket$unix(0x1, 0x5, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) truncate(0x0, 0xfffffffffffffffb) 45.691550483s ago: executing program 1 (id=788): unshare(0x6020400) r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008, r1}, 0x0) 45.662800014s ago: executing program 1 (id=789): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x3000400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x4000, 0x30) openat$incfs(r0, &(0x7f0000000440)='.pending_reads\x00', 0x26a2c0, 0x80) 45.623092786s ago: executing program 1 (id=790): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x5, 0x1a8, 0x6, {}, {0x0, 0x2710}, {0x3}, 0x1, @can={{0x4}, 0x2, 0x3, 0x0, 0x0, "47b46543b18856f3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 45.563702289s ago: executing program 1 (id=791): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mkdir(0x0, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) 45.436820665s ago: executing program 1 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 45.302965631s ago: executing program 1 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0xa, 0x4, "9fc63fc4"}, 0x0, 0x0, 0x0, 0x0}) 31.372568677s ago: executing program 34 (id=779): socket$unix(0x1, 0x5, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) truncate(0x0, 0xfffffffffffffffb) 29.976942844s ago: executing program 35 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0xa, 0x4, "9fc63fc4"}, 0x0, 0x0, 0x0, 0x0}) 17.512162081s ago: executing program 7 (id=1101): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) 17.481309793s ago: executing program 7 (id=1102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000072, 0x0, 0x80000000000}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) 17.365734848s ago: executing program 7 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x6000, 0x0, {0xa80e1d0e5b0ad6eb}}, {'\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.183737647s ago: executing program 7 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 17.183533347s ago: executing program 7 (id=1105): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_setup(0x40, &(0x7f0000000040)) 17.12472756s ago: executing program 7 (id=1106): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x27) fsopen(0x0, 0x0) 17.014465355s ago: executing program 36 (id=1106): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x27) fsopen(0x0, 0x0) 10.427900501s ago: executing program 5 (id=1212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfffffffb, 0x6, 0x200, 0x6}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) 10.195588051s ago: executing program 5 (id=1218): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fcntl$setlease(r0, 0x400, 0x0) 9.876484987s ago: executing program 5 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) read$char_usb(r0, 0x0, 0x0) 9.795726041s ago: executing program 5 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0xc00, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9.758981472s ago: executing program 5 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) write(r0, &(0x7f0000000400)='!', 0x1) 9.643664968s ago: executing program 5 (id=1225): ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.498533505s ago: executing program 37 (id=1225): ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.489479765s ago: executing program 4 (id=1227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003fc0)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.40365064s ago: executing program 4 (id=1229): pipe2$9p(0x0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) 9.257450676s ago: executing program 4 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) pipe2$9p(0x0, 0x80000) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write(r0, &(0x7f0000000180)='/proc/self/cwd/te', 0x11) 9.227471138s ago: executing program 4 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0xc00, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9.209919909s ago: executing program 4 (id=1233): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd) 8.983704529s ago: executing program 4 (id=1234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) close(0x3) exit(0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}}) 8.864153665s ago: executing program 38 (id=1234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) close(0x3) exit(0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}}) 3.095310581s ago: executing program 6 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x158, 0xfffffffffffffffc) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70180f6d662507"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.71063243s ago: executing program 6 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 2.471723631s ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 2.27880909s ago: executing program 8 (id=1271): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0xfff) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 2.278736441s ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) 2.090879059s ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.917801438s ago: executing program 8 (id=1272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0xf5}, @void, @eth={@multicast, @broadcast, @val, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x3, 0x1c, 0x64, 0x0, 0x9, 0x2, 0x0, @loopback, @private=0xa050100}, {0x12, 0xf7, 0x0, @loopback}}}}}}, 0x36) 1.917704508s ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) 1.489573088s ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.2440935s ago: executing program 8 (id=1273): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setresuid(0xee01, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1.2438686s ago: executing program 6 (id=1274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.24375083s ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) 980.165712ms ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 784.367492ms ago: executing program 8 (id=1275): setresgid(0xee00, 0x0, 0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) lstat(&(0x7f0000006680)='./file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 780.702332ms ago: executing program 6 (id=1276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}, @register_looper], 0x59, 0x0, &(0x7f00000004c0)="dab8992bb1f388e06c0ebef7c5c335d20c0d916a3e4582a719715ee076dc3999c5e8ac4493b2331f9ad393422f6f4d8f081a23c2c2b27851c4d7c7d6acaa12b200209c2fedf9919ea2ba2b8847013f61d5c4f34e045b425529"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 780.630612ms ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) 570.609832ms ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 391.157091ms ago: executing program 8 (id=1277): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3, 0x11}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @empty}}}], 0x20}}], 0x1, 0x0) 379.290062ms ago: executing program 6 (id=1278): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\xf0\x01\x00\x00\x00\x00\x00\x00r\xc2\xb9x\xa0q\xc1\xea_\xda74\xd4a\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\v\a\x01Z\x10\fy`\x04\x80\x00(\xba\x91R\x957!\x1b\x9b /\xd6\xb1\xbd\xf3\x8eM}>^1\x12\xab`/ \xa8ma\"\x8cb\xc3\xce`s?\xdb\r\x95\x90\x17*YY\xc3\t\xb7\xcc+\xa5uS\xbc)?E\x18g\x00', 0x3) ftruncate(r1, 0x10003) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x7) 379.192492ms ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) 201.26787ms ago: executing program 0 (id=1236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f000055a000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 528.63µs ago: executing program 8 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 77.87µs ago: executing program 6 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) 0s ago: executing program 9 (id=1226): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): idge_slave_1) entered blocking state [ 36.237943][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.303662][ T776] veth0_vlan: entered promiscuous mode [ 36.325236][ T776] veth1_macvtap: entered promiscuous mode [ 36.471891][ T823] 9p: Unknown uid 00000000004294967295 [ 36.654651][ T832] syzkaller1: entered promiscuous mode [ 36.660313][ T832] syzkaller1: entered allmulticast mode [ 36.778698][ T840] input: syz1 as /devices/virtual/input/input9 [ 36.808680][ T842] syzkaller1: entered promiscuous mode [ 36.814937][ T842] syzkaller1: entered allmulticast mode [ 36.852870][ T848] bridge0: port 3(erspan0) entered blocking state [ 36.859348][ T848] bridge0: port 3(erspan0) entered disabled state [ 36.866092][ T848] erspan0: entered allmulticast mode [ 36.874352][ T848] erspan0: entered promiscuous mode [ 36.879948][ T848] bridge0: port 3(erspan0) entered blocking state [ 36.886407][ T848] bridge0: port 3(erspan0) entered forwarding state [ 36.999147][ T860] netlink: 'syz.2.218': attribute type 32 has an invalid length. [ 37.330920][ T899] sd 0:0:1:0: PR command failed: 1026 [ 37.336423][ T899] sd 0:0:1:0: Sense Key : 0x5 [current] [ 37.342204][ T899] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 37.778147][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 37.778166][ T36] audit: type=1400 audit(1789713403.948:295): avc: denied { create } for pid=939 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.806738][ T36] audit: type=1400 audit(1789713403.978:296): avc: denied { bind } for pid=939 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.827263][ T36] audit: type=1400 audit(1789713403.978:297): avc: denied { listen } for pid=939 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.847053][ T36] audit: type=1400 audit(1789713403.978:298): avc: denied { accept } for pid=939 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.867564][ T36] audit: type=1400 audit(1789713404.038:299): avc: denied { connect } for pid=939 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.940046][ T36] audit: type=1326 audit(1789713404.118:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.2.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc87a59e159 code=0x0 [ 38.151230][ T948] syzkaller1: entered promiscuous mode [ 38.156847][ T948] syzkaller1: entered allmulticast mode [ 38.231317][ T36] audit: type=1400 audit(1789713404.408:301): avc: denied { rename } for pid=951 comm="syz.4.256" name="file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.317292][ T958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.325995][ T958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.519557][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.557042][ T377] rust_binder: 936: undelivered death notification, 0000000000000000 [ 38.672412][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 38.679197][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.688600][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 38.701425][ T31] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 38.717207][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.725537][ T31] usb 5-1: Product: syz [ 38.730032][ T31] usb 5-1: Manufacturer: syz [ 38.734704][ T31] usb 5-1: SerialNumber: syz [ 38.949725][ T31] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 38.964556][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.236853][ T36] audit: type=1400 audit(1789713405.408:302): avc: denied { accept } for pid=985 comm="syz.2.270" path="socket:[8089]" dev="sockfs" ino=8089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.350815][ T31] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 39.562593][ T31] usb 5-1: USB disconnect, device number 2 [ 39.585824][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.865345][ T1011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.878562][ T36] audit: type=1400 audit(1789713406.048:303): avc: denied { connect } for pid=1010 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.925160][ T36] audit: type=1400 audit(1789713406.098:304): avc: denied { write } for pid=1015 comm="syz.2.283" path="socket:[8267]" dev="sockfs" ino=8267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.979521][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.019640][ T1022] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.286'. [ 40.169524][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 40.176450][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.187760][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.197730][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.211700][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.228270][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.243776][ T9] usb 4-1: config 0 descriptor?? [ 40.661907][ T9] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 40.672914][ T1051] sd 0:0:1:0: PR command failed: 1026 [ 40.678797][ T9] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 40.682255][ T1051] sd 0:0:1:0: Sense Key : 0x5 [current] [ 40.692967][ T1051] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 40.735982][ T1056] batadv_slave_0: entered promiscuous mode [ 40.742830][ T1055] batadv_slave_0: left promiscuous mode [ 40.875933][ T9] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 40.884291][ T9] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 40.899027][ T9] microsoft 0003:045E:07DA.0005: no inputs found [ 40.909121][ T9] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 40.941569][ T9] usb 4-1: USB disconnect, device number 6 [ 41.040995][ T1075] kvm: MONITOR instruction emulated as NOP! [ 41.195496][ T1091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'. [ 41.599539][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.749532][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 41.755740][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.764095][ T31] usb 3-1: config 179 has no interface number 0 [ 41.770392][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 41.781487][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 41.792761][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.804272][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 41.815746][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.829033][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 41.838130][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.847474][ T1103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.879948][ T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.031082][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.039617][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.050520][ T67] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.061987][ T67] usb 4-1: string descriptor 0 read error: -22 [ 42.068229][ T67] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 42.098567][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.111582][ T67] usb 4-1: selecting invalid altsetting 1 [ 42.117550][ T67] usb 4-1: unit 6 not found! [ 42.152534][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.161385][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.200541][ T1126] veth1_to_bond: entered promiscuous mode [ 42.207045][ T1126] netlink: 148 bytes leftover after parsing attributes in process `syz.4.328'. [ 42.217997][ T1126] veth1_to_bond (unregistering): left promiscuous mode [ 42.305628][ T10] usb 3-1: USB disconnect, device number 4 [ 42.305752][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 42.320650][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 42.509547][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.670808][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 42.681643][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.692590][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 42.706036][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.712722][ T9] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 42.721848][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.733046][ T9] usb 5-1: config 0 descriptor?? [ 42.909728][ T1147] syzkaller1: entered promiscuous mode [ 42.915275][ T1147] syzkaller1: entered allmulticast mode [ 42.950372][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 42.950391][ T36] audit: type=1400 audit(1789713409.128:331): avc: denied { ioctl } for pid=1148 comm="syz.2.339" path="socket:[9873]" dev="sockfs" ino=9873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.146366][ T67] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 43.156235][ T9] input: HID 0738:1709 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0738:1709.0006/input/input11 [ 43.177298][ T36] audit: type=1400 audit(1789713409.348:332): avc: denied { setopt } for pid=1163 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.198296][ T67] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.208653][ T67] usb 4-1: USB disconnect, device number 7 [ 43.214773][ T36] audit: type=1400 audit(1789713409.348:333): avc: denied { bind } for pid=1163 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.233291][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.241210][ T36] audit: type=1400 audit(1789713409.348:334): avc: denied { name_bind } for pid=1163 comm="syz.1.346" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 43.270489][ T9] saitek 0003:0738:1709.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.4-1/input0 [ 43.297034][ T36] audit: type=1400 audit(1789713409.348:335): avc: denied { node_bind } for pid=1163 comm="syz.1.346" saddr=100.1.1.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 43.417138][ T1173] syzkaller0: refused to change device tx_queue_len [ 43.589895][ T1186] netlink: 'syz.1.355': attribute type 27 has an invalid length. [ 43.931419][ T31] usb 5-1: USB disconnect, device number 4 [ 43.943011][ T1213] syzkaller1: entered promiscuous mode [ 43.948548][ T1213] syzkaller1: entered allmulticast mode [ 43.983014][ T36] audit: type=1400 audit(1789713410.158:336): avc: denied { getopt } for pid=1215 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.025250][ T1222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.370'. [ 44.068188][ T1229] Bluetooth: ISO socket layer initialized [ 44.078376][ T36] audit: type=1400 audit(1789713410.248:337): avc: denied { accept } for pid=1228 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.100987][ T1231] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 44.309646][ T1244] syzkaller1: entered promiscuous mode [ 44.319560][ T1244] syzkaller1: entered allmulticast mode [ 44.458536][ T1249] kvm: kvm [1248]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 44.469130][ T1249] kvm: kvm [1248]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 44.487432][ T1256] FAULT_INJECTION: forcing a failure. [ 44.487432][ T1256] name failslab, interval 1, probability 0, space 0, times 0 [ 44.509227][ T1256] CPU: 0 UID: 0 PID: 1256 Comm: syz.4.386 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 44.509275][ T1256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.509293][ T1256] Call Trace: [ 44.509304][ T1256] [ 44.509316][ T1256] __dump_stack+0x21/0x30 [ 44.509372][ T1256] dump_stack_lvl+0x140/0x1c0 [ 44.509416][ T1256] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.509470][ T1256] dump_stack+0x19/0x20 [ 44.509504][ T1256] should_fail_ex+0x3c2/0x510 [ 44.509533][ T1256] should_failslab+0xac/0x100 [ 44.509564][ T1256] kmem_cache_alloc_noprof+0x42/0x410 [ 44.509597][ T1256] ? key_alloc+0x2ee/0x1060 [ 44.509632][ T1256] ? key_user_lookup+0x263/0x4f0 [ 44.509676][ T1256] key_alloc+0x2ee/0x1060 [ 44.509725][ T1256] keyring_alloc+0x4b/0xc0 [ 44.509758][ T1256] install_process_keyring_to_cred+0xa0/0x130 [ 44.509803][ T1256] __se_sys_keyctl+0xb80/0xe40 [ 44.509845][ T1256] ? __x64_sys_keyctl+0xf0/0xf0 [ 44.509886][ T1256] ? __cfi_do_futex+0x10/0x10 [ 44.509927][ T1256] ? mutex_unlock+0x90/0x240 [ 44.509970][ T1256] ? __se_sys_futex+0x13c/0x320 [ 44.510012][ T1256] ? fput+0x1a4/0x230 [ 44.510058][ T1256] ? __x64_sys_futex+0x110/0x110 [ 44.510096][ T1256] ? __cfi_ksys_write+0x10/0x10 [ 44.510121][ T1256] ? __kasan_check_write+0x18/0x20 [ 44.510155][ T1256] ? fpregs_restore_userregs+0x11c/0x260 [ 44.510184][ T1256] __x64_sys_keyctl+0xc3/0xf0 [ 44.510213][ T1256] x64_sys_call+0x996/0x2ee0 [ 44.510234][ T1256] do_syscall_64+0x57/0xf0 [ 44.510254][ T1256] ? clear_bhb_loop+0x50/0xa0 [ 44.510282][ T1256] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.510308][ T1256] RIP: 0033:0x7f126b99e159 [ 44.510328][ T1256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.510347][ T1256] RSP: 002b:00007f126c8f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 44.510371][ T1256] RAX: ffffffffffffffda RBX: 00007f126bc25fa0 RCX: 00007f126b99e159 [ 44.510387][ T1256] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 44.510401][ T1256] RBP: 00007f126ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 44.510415][ T1256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.510429][ T1256] R13: 00007f126bc26038 R14: 00007f126bc25fa0 R15: 00007ffe0d294b68 [ 44.510450][ T1256] [ 44.776157][ T1259] futex_wake_op: syz.3.387 tries to shift op by 144; fix this program [ 44.784578][ T1259] futex_wake_op: syz.3.387 tries to shift op by 144; fix this program [ 44.869679][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.030694][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.043845][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 45.056343][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.064666][ T9] usb 3-1: Product: syz [ 45.068903][ T9] usb 3-1: Manufacturer: syz [ 45.077944][ T9] usb 3-1: SerialNumber: syz [ 45.088480][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 45.098280][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 45.204766][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.213428][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.319725][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.470695][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.481678][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.491466][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.504402][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.513508][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.522387][ T31] usb 5-1: config 0 descriptor?? [ 45.695357][ T624] usb 3-1: USB disconnect, device number 5 [ 45.738757][ T1287] ======================================================= [ 45.738757][ T1287] WARNING: The mand mount option has been deprecated and [ 45.738757][ T1287] and is ignored by this kernel. Remove the mand [ 45.738757][ T1287] option from the mount to silence this warning. [ 45.738757][ T1287] ======================================================= [ 45.775588][ T36] audit: type=1400 audit(1789713411.958:338): avc: denied { mounton } for pid=1286 comm="syz.1.399" path="/109/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 45.807468][ T36] audit: type=1400 audit(1789713411.978:339): avc: denied { read write } for pid=1288 comm="syz.1.400" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.831565][ T36] audit: type=1400 audit(1789713411.978:340): avc: denied { open } for pid=1288 comm="syz.1.400" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.932360][ T31] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 45.950454][ T31] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 46.014566][ T1305] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 46.039025][ T1310] ªªªªªª: renamed from vlan0 (while UP) [ 46.057957][ T1312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.066487][ T1312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.260635][ T9] usb 5-1: USB disconnect, device number 5 [ 46.589530][ T317] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.626594][ T1345] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 46.759618][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 46.771179][ T317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.779859][ T317] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 46.787471][ T317] usb 3-1: can't read configurations, error -71 [ 46.882014][ T1355] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 47.083748][ T1379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.092800][ T1379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.353759][ T1405] kvm: apic: phys broadcast and lowest prio [ 47.544133][ T1420] kvm: kvm [1419]: vcpu3, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 47.989555][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.139588][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 48.145968][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.157047][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.169937][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.179052][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.187842][ T9] usb 5-1: config 0 descriptor?? [ 48.451974][ T1483] kvm: apic: phys broadcast and lowest prio [ 48.600046][ T1492] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 48.609737][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 48.619952][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input12 [ 48.648544][ T9] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 49.076335][ T1504] syzkaller1: entered promiscuous mode [ 49.088970][ T1504] syzkaller1: entered allmulticast mode [ 49.142620][ T1508] kvm: apic: phys broadcast and lowest prio [ 49.383181][ T1532] netlink: 'syz.3.511': attribute type 27 has an invalid length. [ 49.416883][ T9] usb 5-1: USB disconnect, device number 6 [ 49.547846][ T1541] veth1_to_bond: entered promiscuous mode [ 49.554326][ T1541] netlink: 148 bytes leftover after parsing attributes in process `syz.1.507'. [ 49.570804][ T1541] veth1_to_bond (unregistering): left promiscuous mode [ 50.130487][ T1563] netlink: 'syz.3.518': attribute type 32 has an invalid length. [ 50.146126][ T1564] netlink: 'syz.4.516': attribute type 27 has an invalid length. [ 50.203516][ T1570] netlink: 'syz.1.521': attribute type 5 has an invalid length. [ 50.218350][ T1570] netlink: 'syz.1.521': attribute type 32 has an invalid length. [ 50.398959][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.407631][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.799663][ T317] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.934423][ T1629] rust_binder: Error in use_page_slow: ESRCH [ 50.934451][ T1629] rust_binder: use_range failure ESRCH [ 50.940743][ T1629] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 50.946339][ T1629] rust_binder: Failure in copy_transaction_data: ESRCH [ 50.950142][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 50.955131][ T1629] rust_binder: 1626:1629 transaction call to 1626:0 failed ESRCH, code 0 size 0-0 [ 50.976684][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.982302][ T9] rust_binder: 1626: undelivered TRANSACTION_ERROR: 29201 [ 50.993510][ T317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.015196][ T317] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.021937][ T1632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.024718][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.043441][ T1632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.052401][ T1634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 51.052867][ T317] usb 3-1: config 0 descriptor?? [ 51.473929][ T317] HID 045e:07da: Invalid code 65791 type 1 [ 51.494091][ T317] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input13 [ 51.535283][ T317] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 52.296591][ T317] usb 3-1: USB disconnect, device number 8 [ 52.382734][ T1655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 52.599560][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 52.599560][ T624] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.750624][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.764151][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 52.771073][ T624] usb 4-1: Using ep0 maxpacket: 16 [ 52.773821][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.780567][ T624] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 52.790808][ T9] usb 5-1: config 0 descriptor?? [ 52.802703][ T624] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.815669][ T624] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.822455][ T624] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 52.831699][ T624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.840672][ T624] usb 4-1: config 0 descriptor?? [ 53.228112][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.000A/input/input14 [ 53.243132][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.000A/input/input15 [ 53.276750][ T9] kye 0003:0458:5005.000A: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 53.436534][ T9] usb 5-1: USB disconnect, device number 7 [ 53.607356][ T1681] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 54.102297][ T1729] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 54.116597][ T1729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.587'. [ 54.317913][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 54.317948][ T36] audit: type=1400 audit(1789713420.488:349): avc: denied { create } for pid=1744 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.465671][ T1754] netlink: 'syz.1.597': attribute type 2 has an invalid length. [ 54.473727][ T1754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'. [ 54.539536][ T67] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 54.730545][ T67] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.753089][ T67] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 54.762749][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.792349][ T67] usb 3-1: config 0 descriptor?? [ 54.989520][ T317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.139497][ T317] usb 5-1: Using ep0 maxpacket: 16 [ 55.145779][ T317] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 55.156995][ T317] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.170363][ T317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.177012][ T317] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 55.186103][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.195013][ T317] usb 5-1: config 0 descriptor?? [ 55.208096][ T67] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.000B/input/input16 [ 55.228704][ T67] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.000B/input/input17 [ 55.247781][ T67] kye 0003:0458:5005.000B: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 55.411989][ T45] usb 3-1: USB disconnect, device number 9 [ 55.949086][ T1784] syzkaller1: entered promiscuous mode [ 55.961653][ T1784] syzkaller1: entered allmulticast mode [ 56.035501][ T36] audit: type=1400 audit(1789713422.208:350): avc: denied { cmd } for pid=1790 comm="iou-wrk-1791" path="socket:[14509]" dev="sockfs" ino=14509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.343691][ T1823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.487386][ T1834] syzkaller1: entered promiscuous mode [ 56.499516][ T1834] syzkaller1: entered allmulticast mode [ 56.637621][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.646751][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.733579][ T1858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.750888][ T1858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.179798][ T36] audit: type=1400 audit(1789713423.348:351): avc: denied { ioctl } for pid=1881 comm="syz.3.651" path="/165/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 57.210121][ T1884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.229717][ T1884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.287478][ T1892] process 'syz.3.656' launched './file1' with NULL argv: empty string added [ 57.296798][ T36] audit: type=1400 audit(1789713423.478:352): avc: denied { execute_no_trans } for pid=1891 comm="syz.3.656" path="/168/file1" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.344071][ T36] audit: type=1326 audit(1789713423.518:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1895 comm="syz.4.658" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f126b99e159 code=0x0 [ 57.472646][ T1904] kvm: apic: phys broadcast and lowest prio [ 57.543614][ T36] audit: type=1400 audit(1789713423.718:354): avc: denied { read } for pid=295 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.565541][ T36] audit: type=1400 audit(1789713423.718:355): avc: denied { open } for pid=295 comm="syz-executor" path="/172/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.588429][ T36] audit: type=1400 audit(1789713423.718:356): avc: denied { write } for pid=295 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.610375][ T36] audit: type=1400 audit(1789713423.718:357): avc: denied { setattr } for pid=295 comm="syz-executor" path="/172/tracing/instances" dev="tracefs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.663814][ T36] audit: type=1400 audit(1789713423.838:358): avc: denied { append } for pid=1916 comm="syz.2.668" name="trace" dev="tracefs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.691048][ T624] usbhid 4-1:0.0: can't add hid device: -71 [ 57.702395][ T624] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 57.711805][ T624] usb 4-1: USB disconnect, device number 8 [ 57.783743][ T12] erspan0: left allmulticast mode [ 57.792158][ T12] erspan0: left promiscuous mode [ 57.802877][ T12] bridge0: port 3(erspan0) entered disabled state [ 57.816842][ T12] bridge_slave_1: left allmulticast mode [ 57.822835][ T12] bridge_slave_1: left promiscuous mode [ 57.828614][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.836840][ T12] bridge_slave_0: left allmulticast mode [ 57.842749][ T12] bridge_slave_0: left promiscuous mode [ 57.848572][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.963286][ T12] veth1_macvtap: left promiscuous mode [ 57.968869][ T12] veth0_vlan: left promiscuous mode [ 58.040665][ T1925] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.047749][ T1925] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.054927][ T1925] bridge_slave_0: entered allmulticast mode [ 58.061439][ T1925] bridge_slave_0: entered promiscuous mode [ 58.068188][ T1925] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.075654][ T1925] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.082822][ T1925] bridge_slave_1: entered allmulticast mode [ 58.089358][ T1925] bridge_slave_1: entered promiscuous mode [ 58.184034][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.191159][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.208313][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.215445][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.280460][ T1925] veth0_vlan: entered promiscuous mode [ 58.301947][ T1925] veth1_macvtap: entered promiscuous mode [ 58.383312][ T1941] syzkaller1: entered promiscuous mode [ 58.396121][ T1941] syzkaller1: entered allmulticast mode [ 58.561858][ T1959] syzkaller1: entered promiscuous mode [ 58.567568][ T1959] syzkaller1: entered allmulticast mode [ 59.041621][ T1989] 9p: Unknown uid 00000000004294967295 [ 59.447685][ T2017] netlink: 'syz.4.711': attribute type 32 has an invalid length. [ 60.306861][ T317] usbhid 5-1:0.0: can't add hid device: -32 [ 60.315716][ T317] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 60.629560][ T317] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 60.679516][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.679559][ T795] Bluetooth: hci0: command 0x1003 tx timeout [ 60.711902][ T2096] FAULT_INJECTION: forcing a failure. [ 60.711902][ T2096] name failslab, interval 1, probability 0, space 0, times 0 [ 60.724715][ T2096] CPU: 0 UID: 0 PID: 2096 Comm: syz.4.752 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 60.724752][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.724780][ T2096] Call Trace: [ 60.724789][ T2096] [ 60.724798][ T2096] __dump_stack+0x21/0x30 [ 60.724838][ T2096] dump_stack_lvl+0x140/0x1c0 [ 60.724870][ T2096] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.724905][ T2096] dump_stack+0x19/0x20 [ 60.724937][ T2096] should_fail_ex+0x3c2/0x510 [ 60.724966][ T2096] should_failslab+0xac/0x100 [ 60.724997][ T2096] kmem_cache_alloc_noprof+0x42/0x410 [ 60.725022][ T2096] ? __kasan_check_write+0x18/0x20 [ 60.725046][ T2096] ? skb_clone+0x21d/0x470 [ 60.725078][ T2096] ? __cfi__raw_read_lock_irqsave+0x10/0x10 [ 60.725105][ T2096] skb_clone+0x21d/0x470 [ 60.725138][ T2096] netlink_broadcast_filtered+0x691/0x11d0 [ 60.725174][ T2096] netlink_broadcast+0x3e/0x60 [ 60.725206][ T2096] kobject_uevent_net_broadcast+0x3de/0x5e0 [ 60.725234][ T2096] kobject_uevent_env+0x551/0x7e0 [ 60.725262][ T2096] kobject_uevent+0x21/0x40 [ 60.725287][ T2096] driver_register+0x373/0x3c0 [ 60.725313][ T2096] usb_gadget_register_driver_owner+0xfc/0x270 [ 60.725343][ T2096] raw_ioctl+0x144c/0x37a0 [ 60.725367][ T2096] ? __cfi_raw_ioctl+0x10/0x10 [ 60.725390][ T2096] ? selinux_file_ioctl+0x732/0x1480 [ 60.725415][ T2096] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 60.725446][ T2096] ? __fget_files+0x2bc/0x330 [ 60.725476][ T2096] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.725508][ T2096] ? security_file_ioctl+0x3e/0x110 [ 60.725532][ T2096] ? __cfi_raw_ioctl+0x10/0x10 [ 60.725561][ T2096] __se_sys_ioctl+0x123/0x1b0 [ 60.725593][ T2096] __x64_sys_ioctl+0x7f/0xa0 [ 60.725622][ T2096] x64_sys_call+0x1878/0x2ee0 [ 60.725644][ T2096] do_syscall_64+0x57/0xf0 [ 60.725665][ T2096] ? clear_bhb_loop+0x50/0xa0 [ 60.725696][ T2096] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.725723][ T2096] RIP: 0033:0x7f126b99ddeb [ 60.725743][ T2096] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 60.725763][ T2096] RSP: 002b:00007f126c8f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.725790][ T2096] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f126b99ddeb [ 60.725807][ T2096] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 60.725822][ T2096] RBP: 00007f126c8f2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 60.725838][ T2096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.725853][ T2096] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.725872][ T2096] [ 60.726199][ T2096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.791428][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.804000][ T2096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.818193][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.025421][ T317] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 61.040886][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.050353][ T317] usb 3-1: config 0 descriptor?? [ 61.116514][ T377] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.133974][ T377] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.389805][ T2111] FAULT_INJECTION: forcing a failure. [ 61.389805][ T2111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.412115][ T2111] CPU: 1 UID: 0 PID: 2111 Comm: syz.1.750 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 61.412155][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.412170][ T2111] Call Trace: [ 61.412178][ T2111] [ 61.412188][ T2111] __dump_stack+0x21/0x30 [ 61.412232][ T2111] dump_stack_lvl+0x140/0x1c0 [ 61.412266][ T2111] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.412303][ T2111] dump_stack+0x19/0x20 [ 61.412335][ T2111] should_fail_ex+0x3c2/0x510 [ 61.412365][ T2111] should_fail+0xf/0x20 [ 61.412408][ T2111] should_fail_usercopy+0x1e/0x30 [ 61.412440][ T2111] _copy_from_user+0x20/0xa0 [ 61.412481][ T2111] __se_sys_memfd_create+0x308/0x8f0 [ 61.412509][ T2111] ? __x64_sys_memfd_create+0x80/0x80 [ 61.412536][ T2111] ? __kasan_check_write+0x18/0x20 [ 61.412563][ T2111] __x64_sys_memfd_create+0x5f/0x80 [ 61.412589][ T2111] x64_sys_call+0x29f8/0x2ee0 [ 61.412612][ T2111] do_syscall_64+0x57/0xf0 [ 61.412634][ T2111] ? clear_bhb_loop+0x50/0xa0 [ 61.412664][ T2111] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.412692][ T2111] RIP: 0033:0x7f0e4fb9e159 [ 61.412712][ T2111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.412733][ T2111] RSP: 002b:00007f0e50b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 61.412760][ T2111] RAX: ffffffffffffffda RBX: 00007f0e4fe25fa0 RCX: 00007f0e4fb9e159 [ 61.412779][ T2111] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 61.412795][ T2111] RBP: 00007f0e4fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.412810][ T2111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.412825][ T2111] R13: 00007f0e4fe26038 R14: 00007f0e4fe25fa0 R15: 00007ffd715213b8 [ 61.412846][ T2111] [ 61.604553][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 61.604571][ T36] audit: type=1400 audit(1789713428.777:360): avc: denied { write } for pid=2112 comm="syz.5.751" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.620264][ T2113] rust_binder: 2112:2113 error while translating object: EINVAL [ 61.640890][ T2113] rust_binder: Failure in copy_transaction_data: EINVAL [ 61.640918][ T2113] rust_binder: 2112:2113 transaction async to 2112:0 failed EINVAL, code 0 size 96-24 [ 61.668282][ T1778] rust_binder: 2112: undelivered TRANSACTION_ERROR: 29201 [ 61.677085][ T317] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x2 [ 61.685719][ T317] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 61.823775][ T36] audit: type=1400 audit(1789713428.997:361): avc: denied { ioctl } for pid=2126 comm="syz.1.757" path="/189/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=132 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.895083][ T67] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 61.930229][ T67] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 61.990195][ T36] audit: type=1400 audit(1789713429.167:362): avc: denied { link } for pid=2135 comm="syz.4.761" name="#28" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.013473][ T2136] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.090275][ T36] audit: type=1400 audit(1789713429.267:363): avc: denied { write } for pid=2137 comm="syz.4.762" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.160096][ T36] audit: type=1400 audit(1789713429.337:364): avc: denied { mounton } for pid=2141 comm="syz.5.763" path="/18/file0" dev="incremental-fs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.194433][ T36] audit: type=1400 audit(1789713429.357:365): avc: denied { getattr } for pid=2141 comm="syz.5.763" name="/" dev="incremental-fs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.226880][ T36] audit: type=1400 audit(1789713429.357:366): avc: denied { read } for pid=2141 comm="syz.5.763" name=".pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.250310][ T36] audit: type=1400 audit(1789713429.357:367): avc: denied { open } for pid=2141 comm="syz.5.763" path="/18/file0/.pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.474540][ T317] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 62.482687][ T317] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 62.497906][ T317] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 62.513389][ T317] usb 3-1: USB disconnect, device number 10 [ 62.629531][ T397] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.651228][ T36] audit: type=1400 audit(1789713429.827:368): avc: denied { getopt } for pid=2157 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.699292][ T36] audit: type=1400 audit(1789713429.867:369): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.809580][ T397] usb 6-1: Using ep0 maxpacket: 16 [ 62.819400][ T397] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.827924][ T397] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 62.840594][ T397] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 62.849802][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.866511][ T397] usb 6-1: Product: syz [ 62.875113][ T397] usb 6-1: Manufacturer: syz [ 62.885261][ T397] usb 6-1: SerialNumber: syz [ 62.989704][ T2173] syzkaller1: entered promiscuous mode [ 63.009488][ T2173] syzkaller1: entered allmulticast mode [ 63.099231][ T397] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 63.119856][ T397] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.219345][ T2176] x86/PAT: syz.2.778:2176 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 63.245177][ T2181] syzkaller1: entered promiscuous mode [ 63.259546][ T2181] syzkaller1: entered allmulticast mode [ 63.499430][ T397] usb 6-1: 2:1 : bogus bTerminalLink 6 [ 63.709093][ T397] usb 6-1: USB disconnect, device number 2 [ 64.269889][ T2215] FAULT_INJECTION: forcing a failure. [ 64.269889][ T2215] name failslab, interval 1, probability 0, space 0, times 0 [ 64.270434][ T67] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 64.298780][ T2215] CPU: 1 UID: 0 PID: 2215 Comm: syz.5.797 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 64.298821][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.298838][ T2215] Call Trace: [ 64.298846][ T2215] [ 64.298856][ T2215] __dump_stack+0x21/0x30 [ 64.298899][ T2215] dump_stack_lvl+0x140/0x1c0 [ 64.298933][ T2215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.298970][ T2215] ? preempt_schedule_thunk+0x1a/0x40 [ 64.298997][ T2215] dump_stack+0x19/0x20 [ 64.299031][ T2215] should_fail_ex+0x3c2/0x510 [ 64.299062][ T2215] should_failslab+0xac/0x100 [ 64.299094][ T2215] __kmalloc_cache_noprof+0x41/0x470 [ 64.299120][ T2215] ? kobject_uevent_env+0x2a3/0x7e0 [ 64.299146][ T2215] ? __kasan_check_write+0x18/0x20 [ 64.299173][ T2215] kobject_uevent_env+0x2a3/0x7e0 [ 64.299201][ T2215] kobject_uevent+0x21/0x40 [ 64.299225][ T2215] driver_bound+0x449/0x480 [ 64.299257][ T2215] really_probe+0x7ef/0x8b0 [ 64.299281][ T2215] __driver_probe_device+0x193/0x280 [ 64.299305][ T2215] driver_probe_device+0x54/0x3f0 [ 64.299330][ T2215] __driver_attach+0x422/0x5e0 [ 64.299354][ T2215] bus_for_each_dev+0x249/0x2d0 [ 64.299385][ T2215] ? __cfi___driver_attach+0x10/0x10 [ 64.299407][ T2215] ? __cfi_bus_for_each_dev+0x10/0x10 [ 64.299438][ T2215] ? __kasan_kmalloc+0x96/0xb0 [ 64.299470][ T2215] ? _raw_spin_unlock+0x45/0x60 [ 64.299491][ T2215] ? klist_add_tail+0x1dd/0x220 [ 64.299523][ T2215] driver_attach+0x46/0x50 [ 64.299550][ T2215] bus_add_driver+0x393/0x730 [ 64.299580][ T2215] driver_register+0x2b7/0x3c0 [ 64.299604][ T2215] usb_gadget_register_driver_owner+0xfc/0x270 [ 64.299633][ T2215] raw_ioctl+0x144c/0x37a0 [ 64.299657][ T2215] ? __cfi_raw_ioctl+0x10/0x10 [ 64.299679][ T2215] ? selinux_file_ioctl+0x732/0x1480 [ 64.299705][ T2215] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 64.299736][ T2215] ? __fget_files+0x2bc/0x330 [ 64.299767][ T2215] ? bpf_lsm_file_ioctl+0xd/0x20 [ 64.299798][ T2215] ? security_file_ioctl+0x3e/0x110 [ 64.299823][ T2215] ? __cfi_raw_ioctl+0x10/0x10 [ 64.299843][ T2215] __se_sys_ioctl+0x123/0x1b0 [ 64.299874][ T2215] __x64_sys_ioctl+0x7f/0xa0 [ 64.299904][ T2215] x64_sys_call+0x1878/0x2ee0 [ 64.299927][ T2215] do_syscall_64+0x57/0xf0 [ 64.299949][ T2215] ? clear_bhb_loop+0x50/0xa0 [ 64.299980][ T2215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.300009][ T2215] RIP: 0033:0x7fa12699ddeb [ 64.300029][ T2215] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 64.300050][ T2215] RSP: 002b:00007fa127880f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.300076][ T2215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa12699ddeb [ 64.300094][ T2215] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 64.300109][ T2215] RBP: 00007fa127881fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 64.300125][ T2215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.300141][ T2215] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.300159][ T2215] [ 64.411631][ T67] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.699506][ T397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.870607][ T397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.911101][ T397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.939502][ T397] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.969497][ T397] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.978627][ T397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.010307][ T397] usb 6-1: config 0 descriptor?? [ 65.249894][ T397] usbhid 6-1:0.0: can't add hid device: -71 [ 65.255923][ T397] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 65.270690][ T397] usb 6-1: USB disconnect, device number 3 [ 66.319696][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.359531][ T795] Bluetooth: hci0: command 0x1003 tx timeout [ 68.369346][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.540418][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 68.540438][ T36] audit: type=1400 audit(1789713435.717:375): avc: denied { ioctl } for pid=2245 comm="syz.4.810" path="socket:[18003]" dev="sockfs" ino=18003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.649517][ T1778] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.809524][ T1778] usb 6-1: Using ep0 maxpacket: 32 [ 68.819557][ T1778] usb 6-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 68.828649][ T1778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.837880][ T1778] usb 6-1: config 0 descriptor?? [ 69.272256][ T1778] uclogic 0003:28BD:0078.0010: interface is invalid, ignoring [ 69.480469][ T9] usb 6-1: USB disconnect, device number 4 [ 70.021847][ T2251] syzkaller1: entered promiscuous mode [ 70.039768][ T2251] syzkaller1: entered allmulticast mode [ 70.079915][ T2254] rust_binder: 2253:2254 error while translating object: EINVAL [ 70.087647][ T2254] rust_binder: Failure in copy_transaction_data: EINVAL [ 70.087670][ T2254] rust_binder: 2253:2254 transaction async to 2253:0 failed EINVAL, code 0 size 96-24 [ 70.149560][ T67] rust_binder: 2253: undelivered TRANSACTION_ERROR: 29201 [ 70.399499][ T397] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.580630][ T397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.591822][ T397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.609505][ T397] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 70.618617][ T397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.649761][ T397] usb 6-1: config 0 descriptor?? [ 71.063542][ T397] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x2 [ 71.071294][ T397] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 71.864165][ T397] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 71.879487][ T397] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 71.886905][ T397] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 71.910670][ T397] usb 6-1: USB disconnect, device number 5 [ 72.593984][ T2268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.630382][ T2268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.379805][ T36] audit: type=1326 audit(1789713440.547:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.455573][ T36] audit: type=1326 audit(1789713440.547:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.509549][ T36] audit: type=1326 audit(1789713440.587:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.579523][ T36] audit: type=1326 audit(1789713440.587:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.640358][ T36] audit: type=1326 audit(1789713440.587:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.711493][ T36] audit: type=1326 audit(1789713440.587:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.782745][ T2300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.785057][ T36] audit: type=1326 audit(1789713440.587:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.800088][ T2300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.849510][ T36] audit: type=1326 audit(1789713440.587:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.909314][ T36] audit: type=1326 audit(1789713440.587:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.941687][ T36] audit: type=1326 audit(1789713440.587:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 73.967080][ T36] audit: type=1326 audit(1789713440.587:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 74.039412][ T36] audit: type=1326 audit(1789713440.587:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 74.095347][ T36] audit: type=1326 audit(1789713440.587:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.4.836" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f126b99e159 code=0x7ffc0000 [ 75.419609][ T2319] rust_binder: 2318:2319 no such ref 0 [ 75.449664][ T2319] rust_binder: 2318:2319 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 75.457919][ T2319] rust_binder: Write failure EINVAL in pid:345 [ 75.489515][ T2319] rust_binder: 2318:2319 BC_FREEZE_NOTIFICATION_DONE 400c630e00000000 not found [ 75.549493][ T2319] rust_binder: Write failure EINVAL in pid:345 [ 75.692488][ T2324] sd 0:0:1:0: PR command failed: 1026 [ 75.719609][ T2324] sd 0:0:1:0: Sense Key : 0x5 [current] [ 75.725318][ T2324] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 78.520701][ T53] bridge_slave_1: left allmulticast mode [ 78.533441][ T53] bridge_slave_1: left promiscuous mode [ 78.539121][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.561370][ T53] bridge_slave_0: left allmulticast mode [ 78.567067][ T53] bridge_slave_0: left promiscuous mode [ 78.589599][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.692187][ T2345] syzkaller1: entered promiscuous mode [ 78.708357][ T2345] syzkaller1: entered allmulticast mode [ 78.812252][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.819350][ T2340] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.827025][ T2340] bridge_slave_0: entered allmulticast mode [ 78.837372][ T2340] bridge_slave_0: entered promiscuous mode [ 78.858093][ T53] veth1_macvtap: left promiscuous mode [ 78.863895][ T53] veth0_vlan: left promiscuous mode [ 79.022036][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.029138][ T2340] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.050660][ T2340] bridge_slave_1: entered allmulticast mode [ 79.063682][ T2340] bridge_slave_1: entered promiscuous mode [ 79.228645][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.235782][ T2340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.243124][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.250226][ T2340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.302227][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.310079][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.350285][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.357412][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.375260][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.382388][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.456401][ T2340] veth0_vlan: entered promiscuous mode [ 79.482433][ T2340] veth1_macvtap: entered promiscuous mode [ 79.590552][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.629652][ T2361] syzkaller1: entered promiscuous mode [ 79.646482][ T2361] syzkaller1: entered allmulticast mode [ 79.763532][ T2370] netlink: 'syz.4.857': attribute type 7 has an invalid length. [ 79.771817][ T2370] netlink: 'syz.4.857': attribute type 32 has an invalid length. [ 79.806466][ T12] bridge_slave_1: left allmulticast mode [ 79.812484][ T397] usb 2-1: USB disconnect, device number 2 [ 79.819571][ T12] bridge_slave_1: left promiscuous mode [ 79.825328][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.839636][ T12] bridge_slave_0: left allmulticast mode [ 79.851903][ T12] bridge_slave_0: left promiscuous mode [ 79.863024][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.976270][ T2366] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.985668][ T2366] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.993179][ T2366] bridge_slave_0: entered allmulticast mode [ 80.004239][ T2366] bridge_slave_0: entered promiscuous mode [ 80.025129][ T12] veth1_macvtap: left promiscuous mode [ 80.041991][ T12] veth0_vlan: left promiscuous mode [ 80.130395][ T2366] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.137582][ T2366] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.147736][ T2366] bridge_slave_1: entered allmulticast mode [ 80.156360][ T2366] bridge_slave_1: entered promiscuous mode [ 80.304861][ T2366] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.311990][ T2366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.319309][ T2366] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.326399][ T2366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.400818][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.408761][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.432731][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.439846][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.474755][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.481881][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.526030][ T2398] netlink: 'syz.5.867': attribute type 9 has an invalid length. [ 80.547956][ T2366] veth0_vlan: entered promiscuous mode [ 80.567281][ T2366] veth1_macvtap: entered promiscuous mode [ 80.876468][ T2421] input: syz0 as /devices/virtual/input/input18 [ 80.882986][ T2421] input: failed to attach handler leds to device input18, error: -6 [ 80.952979][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 80.952998][ T36] audit: type=1400 audit(1789713448.127:397): avc: denied { load_policy } for pid=2426 comm="syz.7.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 80.979753][ T2427] SELinux: failed to load policy [ 81.023718][ T36] audit: type=1400 audit(1789713448.197:398): avc: denied { block_suspend } for pid=2430 comm="syz.5.882" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.338716][ T36] audit: type=1400 audit(1789713448.507:399): avc: denied { write } for pid=2448 comm="syz.7.889" name="mcfilter" dev="proc" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.383606][ T36] audit: type=1400 audit(1789713448.557:400): avc: denied { setopt } for pid=2450 comm="syz.7.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.469868][ T36] audit: type=1400 audit(1789713448.647:401): avc: denied { mount } for pid=2456 comm="syz.7.893" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.520221][ T2459] mtrr: base(0x12000) is not aligned on a size(0x6000) boundary [ 81.649583][ T795] Bluetooth: hci0: command 0x1003 tx timeout [ 81.656032][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.685889][ T2471] netlink: 'syz.6.899': attribute type 7 has an invalid length. [ 81.693706][ T2471] netlink: 'syz.6.899': attribute type 32 has an invalid length. [ 81.847270][ T36] audit: type=1400 audit(1789713449.017:402): avc: denied { write } for pid=2481 comm="syz.4.905" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 81.927581][ T2491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.953665][ T2491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.399598][ T67] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 82.467866][ T2530] syzkaller1: entered promiscuous mode [ 82.477188][ T624] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.494975][ T2530] syzkaller1: entered allmulticast mode [ 82.578749][ T67] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 82.601043][ T67] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 82.619488][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.641818][ T67] usb 6-1: Product: syz [ 82.646057][ T67] usb 6-1: Manufacturer: syz [ 82.647008][ T2535] syz.7.927 uses obsolete (PF_INET,SOCK_PACKET) [ 82.657258][ T624] usb 7-1: Using ep0 maxpacket: 16 [ 82.661645][ T67] usb 6-1: SerialNumber: syz [ 82.668744][ T624] usb 7-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 82.689606][ T2514] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.689651][ T624] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8A has an invalid bInterval 134, changing to 11 [ 82.747082][ T624] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8A has invalid maxpacket 59360, setting to 1024 [ 82.779511][ T624] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 82.819601][ T624] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.826274][ T624] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 82.836109][ T2543] input: syz0 as /devices/virtual/input/input19 [ 82.859666][ T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.890273][ T624] usb 7-1: config 0 descriptor?? [ 82.895565][ T2523] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 83.137088][ T67] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 83.321273][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.339752][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.360443][ T624] hid (null): unknown global tag 0xc [ 83.367418][ T624] hid (null): unknown global tag 0xe4 [ 83.380295][ T624] hid (null): unknown global tag 0x52 [ 83.385789][ T624] hid (null): unknown global tag 0xb3 [ 83.563638][ T9] usb 7-1: USB disconnect, device number 2 [ 83.945615][ T2559] rust_binder: 2558:2559 no such ref 0 [ 83.952127][ T2559] rust_binder: 2558:2559 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 83.960858][ T2559] rust_binder: Write failure EINVAL in pid:67 [ 83.961317][ T2559] rust_binder: 2558:2559 BC_FREEZE_NOTIFICATION_DONE 400c630e00000000 not found [ 83.976839][ T2559] rust_binder: Write failure EINVAL in pid:67 [ 84.043662][ T2565] capability: warning: `syz.4.938' uses deprecated v2 capabilities in a way that may be insecure [ 84.255752][ T2583] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 84.457317][ T2602] kvm: user requested TSC rate below hardware speed [ 84.466847][ T2602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.731617][ T67] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 84.901012][ T67] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.912213][ T67] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.922483][ T67] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 84.931732][ T67] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.944945][ T67] usb 8-1: config 0 descriptor?? [ 85.175100][ T397] usb 6-1: USB disconnect, device number 7 [ 85.186227][ T397] usblp0: removed [ 85.366489][ T67] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x2 [ 85.380065][ T67] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 85.579543][ T67] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 85.586995][ T67] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 85.610038][ T67] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 85.629585][ T67] usb 8-1: USB disconnect, device number 2 [ 85.844056][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.852715][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.341860][ T2701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.397038][ T36] audit: type=1400 audit(1789713453.567:403): avc: denied { append } for pid=2703 comm="syz.4.995" name="file0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.443262][ T36] audit: type=1400 audit(1789713453.567:404): avc: denied { open } for pid=2703 comm="syz.4.995" path="/193/file0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.488314][ T2708] SELinux: Context system_u: is not valid (left unmapped). [ 86.500520][ T36] audit: type=1400 audit(1789713453.677:405): avc: denied { relabelto } for pid=2707 comm="syz.4.997" name="194" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 86.535410][ T36] audit: type=1400 audit(1789713453.677:406): avc: denied { associate } for pid=2707 comm="syz.4.997" name="194" dev="tmpfs" ino=1070 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 86.571754][ T36] audit: type=1400 audit(1789713453.737:407): avc: denied { write } for pid=2707 comm="syz.4.997" name="194" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 86.624822][ T36] audit: type=1400 audit(1789713453.737:408): avc: denied { add_name } for pid=2707 comm="syz.4.997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 86.664301][ T67] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 86.668218][ T36] audit: type=1400 audit(1789713453.737:409): avc: denied { create } for pid=2707 comm="syz.4.997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 86.711604][ T67] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.721384][ T36] audit: type=1400 audit(1789713453.737:410): avc: denied { associate } for pid=2707 comm="syz.4.997" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.782727][ T36] audit: type=1400 audit(1789713453.737:411): avc: denied { remove_name } for pid=776 comm="syz-executor" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 86.816951][ T36] audit: type=1400 audit(1789713453.737:412): avc: denied { unlink } for pid=776 comm="syz-executor" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 86.959807][ T2739] syzkaller1: entered promiscuous mode [ 86.965385][ T2739] syzkaller1: entered allmulticast mode [ 87.271805][ T2775] FAULT_INJECTION: forcing a failure. [ 87.271805][ T2775] name failslab, interval 1, probability 0, space 0, times 0 [ 87.272905][ T2773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.295638][ T2775] CPU: 0 UID: 0 PID: 2775 Comm: syz.7.1024 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 87.295679][ T2775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.295695][ T2775] Call Trace: [ 87.295704][ T2775] [ 87.295713][ T2775] __dump_stack+0x21/0x30 [ 87.295756][ T2775] dump_stack_lvl+0x140/0x1c0 [ 87.295792][ T2775] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.295827][ T2775] ? __kasan_check_write+0x18/0x20 [ 87.295854][ T2775] ? _raw_spin_lock_irq+0x93/0x120 [ 87.295878][ T2775] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 87.295903][ T2775] dump_stack+0x19/0x20 [ 87.295936][ T2775] should_fail_ex+0x3c2/0x510 [ 87.295965][ T2775] should_failslab+0xac/0x100 [ 87.295993][ T2775] kmem_cache_alloc_noprof+0x42/0x410 [ 87.296020][ T2775] ? __kasan_check_write+0x18/0x20 [ 87.296044][ T2775] ? copy_pid_ns+0x25a/0xa60 [ 87.296079][ T2775] copy_pid_ns+0x25a/0xa60 [ 87.296113][ T2775] ? __cfi_copy_pid_ns+0x10/0x10 [ 87.296147][ T2775] ? __kasan_check_write+0x18/0x20 [ 87.296173][ T2775] create_new_namespaces+0x275/0x6f0 [ 87.296213][ T2775] unshare_nsproxy_namespaces+0x124/0x180 [ 87.296251][ T2775] ksys_unshare+0x4f9/0x920 [ 87.296305][ T2775] ? fput+0x1a4/0x230 [ 87.296340][ T2775] ? __cfi_ksys_unshare+0x10/0x10 [ 87.296375][ T2775] ? __kasan_check_write+0x18/0x20 [ 87.296402][ T2775] __x64_sys_unshare+0x3c/0x50 [ 87.296435][ T2775] x64_sys_call+0x2998/0x2ee0 [ 87.296458][ T2775] do_syscall_64+0x57/0xf0 [ 87.296481][ T2775] ? clear_bhb_loop+0x50/0xa0 [ 87.296513][ T2775] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.296543][ T2775] RIP: 0033:0x7f876d79e159 [ 87.296563][ T2775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.296585][ T2775] RSP: 002b:00007f876e6ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.296612][ T2775] RAX: ffffffffffffffda RBX: 00007f876da25fa0 RCX: 00007f876d79e159 [ 87.296638][ T2775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 87.296655][ T2775] RBP: 00007f876d83506b R08: 0000000000000000 R09: 0000000000000000 [ 87.296671][ T2775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.296687][ T2775] R13: 00007f876da26038 R14: 00007f876da25fa0 R15: 00007ffce92f2998 [ 87.296709][ T2775] [ 87.556183][ T2778] SELinux: failed to load policy [ 88.090297][ T2797] rust_binder: Error in use_page_slow: ESRCH [ 88.090325][ T2797] rust_binder: use_range failure ESRCH [ 88.099588][ T2797] rust_binder: Failed to allocate buffer. len:8192, is_oneway:false [ 88.109473][ T2797] rust_binder: Failure in copy_transaction_data: ESRCH [ 88.127819][ T2797] rust_binder: 2796:2797 transaction call to 2796:0 failed ESRCH, code 0 size 0-0 [ 88.149489][ T67] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 88.189317][ T624] rust_binder: 2796: undelivered TRANSACTION_ERROR: 29201 [ 88.290757][ T2824] capability: warning: `syz.4.1037' uses 32-bit capabilities (legacy support in use) [ 88.320577][ T67] usb 8-1: not running at top speed; connect to a high speed hub [ 88.329556][ T67] usb 8-1: language id specifier not provided by device, defaulting to English [ 88.340550][ T67] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 88.349764][ T67] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.357780][ T67] usb 8-1: Product: syz [ 88.376770][ T67] usb 8-1: Manufacturer: syz [ 88.393937][ T67] usb 8-1: SerialNumber: syz [ 88.607885][ T67] usb 8-1: MIDIStreaming interface descriptor not found [ 88.631435][ T67] usb 8-1: USB disconnect, device number 3 [ 88.668516][ T2857] FAULT_INJECTION: forcing a failure. [ 88.668516][ T2857] name failslab, interval 1, probability 0, space 0, times 0 [ 88.699525][ T2857] CPU: 1 UID: 0 PID: 2857 Comm: syz.5.1047 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 88.699569][ T2857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.699586][ T2857] Call Trace: [ 88.699594][ T2857] [ 88.699604][ T2857] __dump_stack+0x21/0x30 [ 88.699644][ T2857] dump_stack_lvl+0x140/0x1c0 [ 88.699677][ T2857] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.699714][ T2857] dump_stack+0x19/0x20 [ 88.699745][ T2857] should_fail_ex+0x3c2/0x510 [ 88.699775][ T2857] should_failslab+0xac/0x100 [ 88.699804][ T2857] kmem_cache_alloc_noprof+0x42/0x410 [ 88.699829][ T2857] ? prepare_creds+0x47/0x6b0 [ 88.699855][ T2857] ? __cfi_make_kuid+0x10/0x10 [ 88.699885][ T2857] prepare_creds+0x47/0x6b0 [ 88.699910][ T2857] do_faccessat+0x315/0xd00 [ 88.699935][ T2857] ? fsnotify_parent+0x220/0x220 [ 88.699958][ T2857] ? __kasan_check_write+0x18/0x20 [ 88.699983][ T2857] ? fpregs_restore_userregs+0x11c/0x260 [ 88.700015][ T2857] __x64_sys_faccessat2+0x9e/0xb0 [ 88.700047][ T2857] x64_sys_call+0x2854/0x2ee0 [ 88.700079][ T2857] do_syscall_64+0x57/0xf0 [ 88.700101][ T2857] ? clear_bhb_loop+0x50/0xa0 [ 88.700132][ T2857] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.700160][ T2857] RIP: 0033:0x7fa12699e159 [ 88.700186][ T2857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.700208][ T2857] RSP: 002b:00007fa127883028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 88.700235][ T2857] RAX: ffffffffffffffda RBX: 00007fa126c25fa0 RCX: 00007fa12699e159 [ 88.700254][ T2857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 88.700271][ T2857] RBP: 00007fa126a3506b R08: 0000000000000000 R09: 0000000000000000 [ 88.700288][ T2857] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 88.700305][ T2857] R13: 00007fa126c26038 R14: 00007fa126c25fa0 R15: 00007ffca3021ec8 [ 88.700325][ T2857] [ 89.237321][ T2883] FAULT_INJECTION: forcing a failure. [ 89.237321][ T2883] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.277234][ T2883] CPU: 0 UID: 0 PID: 2883 Comm: syz.5.1055 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 89.277280][ T2883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.277298][ T2883] Call Trace: [ 89.277305][ T2883] [ 89.277315][ T2883] __dump_stack+0x21/0x30 [ 89.277358][ T2883] dump_stack_lvl+0x140/0x1c0 [ 89.277398][ T2883] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.277436][ T2883] ? __cfi___switch_to+0x10/0x10 [ 89.277476][ T2883] dump_stack+0x19/0x20 [ 89.277509][ T2883] should_fail_ex+0x3c2/0x510 [ 89.277551][ T2883] should_fail_alloc_page+0xec/0x110 [ 89.277586][ T2883] __alloc_pages_noprof+0x1c0/0x7e0 [ 89.277624][ T2883] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 89.277665][ T2883] ? __sched_text_start+0x10/0x10 [ 89.277691][ T2883] ? plist_add+0x4d4/0x570 [ 89.277715][ T2883] __folio_alloc_noprof+0x14/0x80 [ 89.277750][ T2883] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 89.277786][ T2883] ? shmem_replace_folio+0x9b0/0x9b0 [ 89.277827][ T2883] ? shmem_huge_global_enabled+0x2da/0x360 [ 89.277857][ T2883] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 89.277887][ T2883] shmem_get_folio_gfp+0x5cd/0x12e0 [ 89.277918][ T2883] ? shmem_get_folio+0xc0/0xc0 [ 89.277942][ T2883] ? _raw_spin_lock+0x92/0x120 [ 89.277964][ T2883] ? __cfi__raw_spin_lock+0x10/0x10 [ 89.277987][ T2883] shmem_fallocate+0x8df/0xcb0 [ 89.278025][ T2883] ? __cfi_shmem_fallocate+0x10/0x10 [ 89.278060][ T2883] ? __se_sys_futex+0x13c/0x320 [ 89.278093][ T2883] ? fput+0x1a4/0x230 [ 89.278128][ T2883] vfs_fallocate+0x533/0x620 [ 89.278157][ T2883] __x64_sys_fallocate+0xc3/0x110 [ 89.278187][ T2883] x64_sys_call+0x2e48/0x2ee0 [ 89.278209][ T2883] do_syscall_64+0x57/0xf0 [ 89.278231][ T2883] ? clear_bhb_loop+0x50/0xa0 [ 89.278262][ T2883] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.278291][ T2883] RIP: 0033:0x7fa12699e159 [ 89.278311][ T2883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.278331][ T2883] RSP: 002b:00007fa127883028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 89.278356][ T2883] RAX: ffffffffffffffda RBX: 00007fa126c25fa0 RCX: 00007fa12699e159 [ 89.278375][ T2883] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 89.278391][ T2883] RBP: 00007fa126a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.278407][ T2883] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 89.278422][ T2883] R13: 00007fa126c26038 R14: 00007fa126c25fa0 R15: 00007ffca3021ec8 [ 89.278444][ T2883] [ 89.625577][ T2867] syz.6.1050 (2867): drop_caches: 3 [ 89.714254][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.723112][ T2870] syz.6.1050 (2870): drop_caches: 3 [ 89.729189][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.679577][ T2958] futex_wake_op: syz.4.1078 tries to shift op by 144; fix this program [ 90.688221][ T2958] futex_wake_op: syz.4.1078 tries to shift op by 144; fix this program [ 91.086780][ T2987] FAULT_INJECTION: forcing a failure. [ 91.086780][ T2987] name failslab, interval 1, probability 0, space 0, times 0 [ 91.099543][ T2987] CPU: 0 UID: 0 PID: 2987 Comm: syz.7.1090 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 91.099583][ T2987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.099599][ T2987] Call Trace: [ 91.099608][ T2987] [ 91.099617][ T2987] __dump_stack+0x21/0x30 [ 91.099659][ T2987] dump_stack_lvl+0x140/0x1c0 [ 91.099695][ T2987] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.099733][ T2987] dump_stack+0x19/0x20 [ 91.099766][ T2987] should_fail_ex+0x3c2/0x510 [ 91.099798][ T2987] should_failslab+0xac/0x100 [ 91.099830][ T2987] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 91.099859][ T2987] ? __d_alloc+0x42/0x8c0 [ 91.099884][ T2987] __d_alloc+0x42/0x8c0 [ 91.099917][ T2987] d_alloc_anon+0x1b/0x30 [ 91.099941][ T2987] path_from_stashed+0x39b/0x860 [ 91.099966][ T2987] ? __cfi_path_from_stashed+0x10/0x10 [ 91.099988][ T2987] ? _raw_spin_lock+0x92/0x120 [ 91.100012][ T2987] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.100034][ T2987] ? do_futex+0x32a/0x510 [ 91.100070][ T2987] pidfs_alloc_file+0x109/0x1e0 [ 91.100095][ T2987] ? _raw_spin_unlock+0x45/0x60 [ 91.100117][ T2987] ? __cfi_pidfs_alloc_file+0x10/0x10 [ 91.100145][ T2987] pidfd_prepare+0x80/0x150 [ 91.100186][ T2987] __se_sys_pidfd_open+0xd6/0x250 [ 91.100219][ T2987] ? __x64_sys_pidfd_open+0x80/0x80 [ 91.100252][ T2987] ? __kasan_check_write+0x18/0x20 [ 91.100280][ T2987] __x64_sys_pidfd_open+0x5f/0x80 [ 91.100312][ T2987] x64_sys_call+0x28c0/0x2ee0 [ 91.100335][ T2987] do_syscall_64+0x57/0xf0 [ 91.100358][ T2987] ? clear_bhb_loop+0x50/0xa0 [ 91.100390][ T2987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.100420][ T2987] RIP: 0033:0x7f876d79e159 [ 91.100440][ T2987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.100462][ T2987] RSP: 002b:00007f876e6ca018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 91.100490][ T2987] RAX: ffffffffffffffda RBX: 00007f876da25fa0 RCX: 00007f876d79e159 [ 91.100510][ T2987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000008e [ 91.100526][ T2987] RBP: 00007f876d83506b R08: 0000000000000000 R09: 0000000000000000 [ 91.100543][ T2987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.100559][ T2987] R13: 00007f876da26038 R14: 00007f876da25fa0 R15: 00007ffce92f2998 [ 91.100582][ T2987] [ 91.300052][ T624] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 91.351422][ T397] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 91.472857][ T2998] FAULT_INJECTION: forcing a failure. [ 91.472857][ T2998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.486339][ T2998] CPU: 1 UID: 0 PID: 2998 Comm: syz.7.1095 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 91.486377][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.486393][ T2998] Call Trace: [ 91.486402][ T2998] [ 91.486412][ T2998] __dump_stack+0x21/0x30 [ 91.486455][ T2998] dump_stack_lvl+0x140/0x1c0 [ 91.486492][ T2998] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.486529][ T2998] dump_stack+0x19/0x20 [ 91.486562][ T2998] should_fail_ex+0x3c2/0x510 [ 91.486604][ T2998] should_fail_alloc_page+0xec/0x110 [ 91.486638][ T2998] __alloc_pages_noprof+0x1c0/0x7e0 [ 91.486677][ T2998] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.486716][ T2998] ? __alloc_pages_noprof+0x35a/0x7e0 [ 91.486754][ T2998] ? try_to_wake_up+0x119e/0x1fd0 [ 91.486784][ T2998] ? vhost_dev_set_owner+0x2a9/0xcb0 [ 91.486809][ T2998] ___kmalloc_large_node+0x81/0x220 [ 91.486836][ T2998] ? vhost_dev_set_owner+0x2a9/0xcb0 [ 91.486860][ T2998] __kmalloc_large_node_noprof+0x1e/0xd0 [ 91.486888][ T2998] ? vhost_dev_set_owner+0x2a9/0xcb0 [ 91.486912][ T2998] __kmalloc_noprof+0x326/0x510 [ 91.486940][ T2998] vhost_dev_set_owner+0x2a9/0xcb0 [ 91.486964][ T2998] ? has_cap_mac_admin+0xd0/0xd0 [ 91.486992][ T2998] vhost_dev_ioctl+0xdc/0x11b0 [ 91.487019][ T2998] ? selinux_file_ioctl+0x732/0x1480 [ 91.487047][ T2998] ? __cfi_vhost_dev_ioctl+0x10/0x10 [ 91.487074][ T2998] ? mutex_lock+0x97/0x1d0 [ 91.487104][ T2998] ? __cfi_mutex_lock+0x10/0x10 [ 91.487133][ T2998] ? do_futex+0x37d/0x510 [ 91.487169][ T2998] vhost_vsock_dev_ioctl+0x239/0xdc0 [ 91.487208][ T2998] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 91.487246][ T2998] ? __fget_files+0x2bc/0x330 [ 91.487277][ T2998] ? bpf_lsm_file_ioctl+0xd/0x20 [ 91.487310][ T2998] ? security_file_ioctl+0x3e/0x110 [ 91.487338][ T2998] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 91.487376][ T2998] __se_sys_ioctl+0x123/0x1b0 [ 91.487406][ T2998] __x64_sys_ioctl+0x7f/0xa0 [ 91.487437][ T2998] x64_sys_call+0x1878/0x2ee0 [ 91.487460][ T2998] do_syscall_64+0x57/0xf0 [ 91.487483][ T2998] ? clear_bhb_loop+0x50/0xa0 [ 91.487516][ T2998] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.487545][ T2998] RIP: 0033:0x7f876d79e159 [ 91.487566][ T2998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.487594][ T2998] RSP: 002b:00007f876e6ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.487622][ T2998] RAX: ffffffffffffffda RBX: 00007f876da25fa0 RCX: 00007f876d79e159 [ 91.487641][ T2998] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 91.487657][ T2998] RBP: 00007f876d83506b R08: 0000000000000000 R09: 0000000000000000 [ 91.487674][ T2998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.487690][ T2998] R13: 00007f876da26038 R14: 00007f876da25fa0 R15: 00007ffce92f2998 [ 91.487713][ T2998] [ 91.812735][ T624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.823899][ T624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.833833][ T624] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.843003][ T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.851952][ T624] usb 7-1: config 0 descriptor?? [ 91.883478][ T397] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.892041][ T397] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 91.913275][ T397] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 91.922420][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.930473][ T397] usb 6-1: Product: syz [ 91.934686][ T397] usb 6-1: Manufacturer: syz [ 91.939325][ T397] usb 6-1: SerialNumber: syz [ 92.031465][ T3011] input: syz1 as /devices/virtual/input/input20 [ 92.151752][ T397] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 92.374066][ T2812] bridge_slave_1: left allmulticast mode [ 92.379862][ T2812] bridge_slave_1: left promiscuous mode [ 92.385651][ T2812] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.393877][ T2812] bridge_slave_0: left allmulticast mode [ 92.400052][ T2812] bridge_slave_0: left promiscuous mode [ 92.406013][ T2812] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.463832][ T624] usb 7-1: string descriptor 0 read error: -22 [ 92.555291][ T2812] veth1_macvtap: left promiscuous mode [ 92.562042][ T2812] veth0_vlan: left promiscuous mode [ 92.666846][ T624] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0015/input/input21 [ 92.711722][ T624] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 92.862942][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.873072][ T1778] usb 7-1: USB disconnect, device number 3 [ 92.879475][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.888585][ T3022] bridge_slave_0: entered allmulticast mode [ 92.900596][ T3022] bridge_slave_0: entered promiscuous mode [ 92.912528][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.919988][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.927100][ T3022] bridge_slave_1: entered allmulticast mode [ 92.933977][ T3022] bridge_slave_1: entered promiscuous mode [ 92.954363][ T397] usb 6-1: failed to enable PITCH for EP 0x82 [ 92.963852][ T397] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 92.979776][ T397] usb 6-1: clock source 0 is not valid, cannot use [ 92.999816][ T397] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 93.000038][ T3031] kvm: kvm [3030]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 93.010416][ T397] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 93.043499][ T397] usb 6-1: USB disconnect, device number 8 [ 93.057103][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.064244][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.071677][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.078738][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.110853][ T2812] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.118398][ T2812] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.131817][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.138895][ T2812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.147092][ T2812] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.154177][ T2812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.201712][ T3022] veth0_vlan: entered promiscuous mode [ 93.216756][ T3022] veth1_macvtap: entered promiscuous mode [ 93.391547][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 93.391567][ T36] audit: type=1400 audit(1789713460.567:421): avc: denied { connect } for pid=3044 comm="syz.8.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.436806][ T36] audit: type=1400 audit(1789713460.607:422): avc: denied { mount } for pid=3046 comm="syz.6.1117" name="/" dev="ramfs" ino=25093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.908128][ T3092] af_packet: packet size is too long (25449 > 2016) [ 93.928830][ T36] audit: type=1400 audit(1789713461.097:423): avc: denied { relabelfrom } for pid=3095 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.954518][ T36] audit: type=1400 audit(1789713461.097:424): avc: denied { relabelto } for pid=3095 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.976360][ T36] audit: type=1400 audit(1789713461.127:425): avc: denied { attach_queue } for pid=3095 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.299872][ T3124] device-mapper: ioctl: Unable to interpret geometry settings. [ 94.329644][ T3130] input: syz0 as /devices/virtual/input/input22 [ 94.355923][ T3133] FAULT_INJECTION: forcing a failure. [ 94.355923][ T3133] name failslab, interval 1, probability 0, space 0, times 0 [ 94.380251][ T3133] CPU: 1 UID: 0 PID: 3133 Comm: syz.4.1153 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 94.380291][ T3133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.380306][ T3133] Call Trace: [ 94.380313][ T3133] [ 94.380323][ T3133] __dump_stack+0x21/0x30 [ 94.380362][ T3133] dump_stack_lvl+0x140/0x1c0 [ 94.380395][ T3133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.380431][ T3133] dump_stack+0x19/0x20 [ 94.380462][ T3133] should_fail_ex+0x3c2/0x510 [ 94.380490][ T3133] ? sk_prot_alloc+0x104/0x3a0 [ 94.380520][ T3133] should_failslab+0xac/0x100 [ 94.380550][ T3133] __kmalloc_noprof+0x69/0x510 [ 94.380584][ T3133] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 94.380609][ T3133] ? sk_prot_alloc+0x104/0x3a0 [ 94.380638][ T3133] ? security_inode_alloc+0x51/0x230 [ 94.380672][ T3133] sk_prot_alloc+0x104/0x3a0 [ 94.380714][ T3133] ? security_inode_alloc+0xc2/0x230 [ 94.380745][ T3133] sk_alloc+0x40/0x590 [ 94.380773][ T3133] can_create+0x2ee/0x5e0 [ 94.380805][ T3133] __sock_create+0x3a2/0x810 [ 94.380833][ T3133] __sys_socket+0xe1/0x1c0 [ 94.380859][ T3133] __x64_sys_socket+0x7e/0x90 [ 94.380885][ T3133] x64_sys_call+0x2608/0x2ee0 [ 94.380907][ T3133] do_syscall_64+0x57/0xf0 [ 94.380928][ T3133] ? clear_bhb_loop+0x50/0xa0 [ 94.380957][ T3133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.380985][ T3133] RIP: 0033:0x7f126b99e159 [ 94.381004][ T3133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.381024][ T3133] RSP: 002b:00007f126c8f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.381051][ T3133] RAX: ffffffffffffffda RBX: 00007f126bc25fa0 RCX: 00007f126b99e159 [ 94.381068][ T3133] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 94.381083][ T3133] RBP: 00007f126ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.381097][ T3133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.381111][ T3133] R13: 00007f126bc26038 R14: 00007f126bc25fa0 R15: 00007ffe0d294b68 [ 94.381131][ T3133] [ 94.760565][ T2812] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.767706][ T36] audit: type=1400 audit(1789713461.937:426): avc: denied { ioctl } for pid=3154 comm="syz.6.1162" path="socket:[24400]" dev="sockfs" ino=24400 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.868393][ T36] audit: type=1400 audit(1789713462.037:427): avc: denied { write } for pid=3156 comm="syz.4.1163" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 95.529310][ T36] audit: type=1326 audit(1789713462.697:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.8.1166" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54df19e159 code=0x0 [ 95.777509][ T3171] netlink: 'syz.4.1168': attribute type 2 has an invalid length. [ 96.368744][ T3183] FAULT_INJECTION: forcing a failure. [ 96.368744][ T3183] name failslab, interval 1, probability 0, space 0, times 0 [ 96.403694][ T36] audit: type=1400 audit(1789713463.577:429): avc: denied { ioctl } for pid=3184 comm="syz.8.1174" path="/" dev="configfs" ino=2476 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.429152][ T3183] CPU: 1 UID: 0 PID: 3183 Comm: syz.5.1173 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 96.429194][ T3183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.429211][ T3183] Call Trace: [ 96.429219][ T3183] [ 96.429228][ T3183] __dump_stack+0x21/0x30 [ 96.429271][ T3183] dump_stack_lvl+0x140/0x1c0 [ 96.429306][ T3183] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.429343][ T3183] ? avc_has_extended_perms+0x94b/0xe60 [ 96.429377][ T3183] dump_stack+0x19/0x20 [ 96.429411][ T3183] should_fail_ex+0x3c2/0x510 [ 96.429446][ T3183] should_failslab+0xac/0x100 [ 96.429480][ T3183] __kmalloc_cache_node_noprof+0x46/0x430 [ 96.429510][ T3183] ? __get_vm_area_node+0x150/0x390 [ 96.429558][ T3183] __get_vm_area_node+0x150/0x390 [ 96.429597][ T3183] __vmalloc_node_range_noprof+0x340/0x1300 [ 96.429638][ T3183] ? kvm_dev_ioctl+0x12a/0x14c0 [ 96.429661][ T3183] ? number+0xc9d/0xf00 [ 96.429700][ T3183] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 96.429741][ T3183] ? vsnprintf+0x19ef/0x1ad0 [ 96.429779][ T3183] ? kvm_dev_ioctl+0x12a/0x14c0 [ 96.429802][ T3183] __vmalloc_noprof+0x104/0x1d0 [ 96.429824][ T3183] ? kvm_dev_ioctl+0x12a/0x14c0 [ 96.429847][ T3183] ? alloc_fd+0x4c1/0x570 [ 96.429874][ T3183] ? __cfi___vmalloc_noprof+0x10/0x10 [ 96.429903][ T3183] kvm_dev_ioctl+0x12a/0x14c0 [ 96.429926][ T3183] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 96.429948][ T3183] ? bpf_lsm_file_ioctl+0xd/0x20 [ 96.429981][ T3183] ? security_file_ioctl+0x3e/0x110 [ 96.430007][ T3183] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 96.430029][ T3183] __se_sys_ioctl+0x123/0x1b0 [ 96.430071][ T3183] __x64_sys_ioctl+0x7f/0xa0 [ 96.430101][ T3183] x64_sys_call+0x1878/0x2ee0 [ 96.430125][ T3183] do_syscall_64+0x57/0xf0 [ 96.430148][ T3183] ? clear_bhb_loop+0x50/0xa0 [ 96.430180][ T3183] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.430211][ T3183] RIP: 0033:0x7fa12699e159 [ 96.430233][ T3183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.430255][ T3183] RSP: 002b:00007fa127883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.430282][ T3183] RAX: ffffffffffffffda RBX: 00007fa126c25fa0 RCX: 00007fa12699e159 [ 96.430301][ T3183] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 96.430317][ T3183] RBP: 00007fa126a3506b R08: 0000000000000000 R09: 0000000000000000 [ 96.430333][ T3183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.430347][ T3183] R13: 00007fa126c26038 R14: 00007fa126c25fa0 R15: 00007ffca3021ec8 [ 96.430368][ T3183] [ 96.693106][ T3183] syz.5.1173: vmalloc error: size 39304, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 96.719944][ T3183] CPU: 1 UID: 0 PID: 3183 Comm: syz.5.1173 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 96.719982][ T3183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.719998][ T3183] Call Trace: [ 96.720006][ T3183] [ 96.720016][ T3183] __dump_stack+0x21/0x30 [ 96.720055][ T3183] dump_stack_lvl+0x140/0x1c0 [ 96.720089][ T3183] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.720122][ T3183] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 96.720149][ T3183] dump_stack+0x19/0x20 [ 96.720180][ T3183] warn_alloc+0x1e7/0x2c0 [ 96.720212][ T3183] ? __kasan_kmalloc+0x28/0xb0 [ 96.720242][ T3183] ? __cfi_warn_alloc+0x10/0x10 [ 96.720276][ T3183] ? __get_vm_area_node+0x150/0x390 [ 96.720307][ T3183] ? __get_vm_area_node+0x382/0x390 [ 96.720337][ T3183] __vmalloc_node_range_noprof+0x365/0x1300 [ 96.720370][ T3183] ? number+0xc9d/0xf00 [ 96.720403][ T3183] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 96.720435][ T3183] ? vsnprintf+0x19ef/0x1ad0 [ 96.720468][ T3183] ? kvm_dev_ioctl+0x12a/0x14c0 [ 96.720486][ T3183] __vmalloc_noprof+0x104/0x1d0 [ 96.720518][ T3183] ? kvm_dev_ioctl+0x12a/0x14c0 [ 96.720537][ T3183] ? alloc_fd+0x4c1/0x570 [ 96.720563][ T3183] ? __cfi___vmalloc_noprof+0x10/0x10 [ 96.720583][ T3183] kvm_dev_ioctl+0x12a/0x14c0 [ 96.720602][ T3183] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 96.720624][ T3183] ? bpf_lsm_file_ioctl+0xd/0x20 [ 96.720652][ T3183] ? security_file_ioctl+0x3e/0x110 [ 96.720676][ T3183] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 96.720695][ T3183] __se_sys_ioctl+0x123/0x1b0 [ 96.720724][ T3183] __x64_sys_ioctl+0x7f/0xa0 [ 96.720750][ T3183] x64_sys_call+0x1878/0x2ee0 [ 96.720771][ T3183] do_syscall_64+0x57/0xf0 [ 96.720791][ T3183] ? clear_bhb_loop+0x50/0xa0 [ 96.720819][ T3183] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.720847][ T3183] RIP: 0033:0x7fa12699e159 [ 96.720866][ T3183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.720886][ T3183] RSP: 002b:00007fa127883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.720911][ T3183] RAX: ffffffffffffffda RBX: 00007fa126c25fa0 RCX: 00007fa12699e159 [ 96.720929][ T3183] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 96.720944][ T3183] RBP: 00007fa126a3506b R08: 0000000000000000 R09: 0000000000000000 [ 96.720959][ T3183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.720973][ T3183] R13: 00007fa126c26038 R14: 00007fa126c25fa0 R15: 00007ffca3021ec8 [ 96.720995][ T3183] [ 96.721017][ T3183] Mem-Info: [ 96.781918][ T3190] 9pnet_fd: Insufficient options for proto=fd [ 96.782464][ T36] audit: type=1400 audit(1789713463.957:430): avc: denied { mounton } for pid=3187 comm="syz.8.1175" path="/19/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.809651][ T3183] active_anon:9761 inactive_anon:2 isolated_anon:0 [ 96.809651][ T3183] active_file:3752 inactive_file:880 isolated_file:0 [ 96.809651][ T3183] unevictable:0 dirty:156 writeback:0 [ 96.809651][ T3183] slab_reclaimable:5878 slab_unreclaimable:74737 [ 96.809651][ T3183] mapped:24448 shmem:168 pagetables:1051 [ 96.809651][ T3183] sec_pagetables:0 bounce:0 [ 96.809651][ T3183] kernel_misc_reclaimable:0 [ 96.809651][ T3183] free:1531706 free_pcp:7124 free_cma:0 [ 96.990606][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.007139][ T3183] Node 0 active_anon:39044kB inactive_anon:8kB active_file:15008kB inactive_file:3520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97792kB dirty:624kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5308kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no [ 97.049863][ T795] Bluetooth: hci0: command 0x1003 tx timeout [ 97.136381][ T3183] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5212kB free_cma:0kB [ 97.179981][ T3183] lowmem_reserve[]: 0 3921 3921 [ 97.195317][ T3183] Normal free:3195680kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32584kB inactive_anon:8kB active_file:15008kB inactive_file:3520kB unevictable:0kB writepending:676kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3684kB local_pcp:280kB free_cma:0kB [ 97.231657][ T3195] random: crng reseeded on system resumption [ 97.264991][ T3183] lowmem_reserve[]: 0 0 0 [ 97.276416][ T3195] Restarting kernel threads ... done. [ 97.282270][ T3183] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 97.299047][ T3183] Normal: 70*4kB (ME) 702*8kB (UME) 935*16kB (UME) 775*32kB (UME) 566*64kB (UME) 238*128kB (UME) 93*256kB (UME) 53*512kB (UME) 34*1024kB (UME) 17*2048kB (UM) 723*4096kB (M) = 3194328kB [ 97.317729][ T3183] 4817 total pagecache pages [ 97.322563][ T3183] 21 pages in swap cache [ 97.326883][ T3183] Free swap = 124828kB [ 97.331497][ T3183] Total swap = 124996kB [ 97.335737][ T3183] 2097051 pages RAM [ 97.339801][ T3183] 0 pages HighMem/MovableOnly [ 97.344720][ T3183] 352241 pages reserved [ 97.348961][ T3183] 0 pages cma reserved [ 97.359122][ T3183] Memory allocations: [ 97.363347][ T3183] 0 B 0 init/main.c:1477 func:do_initcalls [ 97.370907][ T3183] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 97.379061][ T3183] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 97.388002][ T3183] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 97.396095][ T3183] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 97.404298][ T3183] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 97.420833][ T3183] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 97.428830][ T3183] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 97.438117][ T3183] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 97.447821][ T3183] 0 B 0 init/initramfs.c:101 func:find_link [ 97.574508][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.594831][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.614504][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.635447][ T3217] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 97.643882][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.661024][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.676335][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.705730][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.720901][ T1778] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 97.728519][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.769472][ T3221] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.6.1188: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 97.787007][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.790664][ T3221] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.6.1188: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 97.802659][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.839798][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.857041][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.888297][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 97.903563][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 97.903605][ T3221] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.6.1188: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 97.939835][ T1778] usb 6-1: config 0 has no interfaces? [ 97.945438][ T1778] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 97.959540][ T1778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.987958][ T1778] usb 6-1: config 0 descriptor?? [ 98.019341][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 98.079017][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 98.159518][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 98.406222][ T3203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.424003][ T3203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.451097][ T10] usb 6-1: USB disconnect, device number 9 [ 99.170633][ T3291] kvm: apic: phys broadcast and lowest prio [ 99.190405][ T3295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.209821][ T3295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.310617][ T3302] FAULT_INJECTION: forcing a failure. [ 99.310617][ T3302] name failslab, interval 1, probability 0, space 0, times 0 [ 99.339469][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz.5.1218 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 99.339512][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.339528][ T3302] Call Trace: [ 99.339536][ T3302] [ 99.339545][ T3302] __dump_stack+0x21/0x30 [ 99.339587][ T3302] dump_stack_lvl+0x140/0x1c0 [ 99.339619][ T3302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.339653][ T3302] dump_stack+0x19/0x20 [ 99.339686][ T3302] should_fail_ex+0x3c2/0x510 [ 99.339714][ T3302] should_failslab+0xac/0x100 [ 99.339745][ T3302] kmem_cache_alloc_noprof+0x42/0x410 [ 99.339770][ T3302] ? __kasan_slab_alloc+0x73/0x90 [ 99.339799][ T3302] ? fasync_alloc+0x2e/0xb0 [ 99.339825][ T3302] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 99.339850][ T3302] fasync_alloc+0x2e/0xb0 [ 99.339877][ T3302] fcntl_setlease+0x33a/0x570 [ 99.339904][ T3302] ? __cfi_fcntl_setlease+0x10/0x10 [ 99.339931][ T3302] ? bpf_lsm_file_permission+0xd/0x20 [ 99.339964][ T3302] ? vfs_write+0xbcf/0xfd0 [ 99.339989][ T3302] do_fcntl+0x5de/0x1580 [ 99.340016][ T3302] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 99.340044][ T3302] ? check_fcntl_cmd+0xb0/0xb0 [ 99.340073][ T3302] ? __se_sys_futex+0x13c/0x320 [ 99.340109][ T3302] ? bpf_lsm_file_fcntl+0xd/0x20 [ 99.340140][ T3302] ? security_file_fcntl+0x3e/0x110 [ 99.340166][ T3302] __se_sys_fcntl+0xe4/0x180 [ 99.340194][ T3302] __x64_sys_fcntl+0x7f/0xa0 [ 99.340221][ T3302] x64_sys_call+0x1cb3/0x2ee0 [ 99.340244][ T3302] do_syscall_64+0x57/0xf0 [ 99.340267][ T3302] ? clear_bhb_loop+0x50/0xa0 [ 99.340298][ T3302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.340327][ T3302] RIP: 0033:0x7fa12699e159 [ 99.340348][ T3302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.340385][ T3302] RSP: 002b:00007fa127883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 99.340413][ T3302] RAX: ffffffffffffffda RBX: 00007fa126c25fa0 RCX: 00007fa12699e159 [ 99.340432][ T3302] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 99.340448][ T3302] RBP: 00007fa126a3506b R08: 0000000000000000 R09: 0000000000000000 [ 99.340464][ T3302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.340479][ T3302] R13: 00007fa126c26038 R14: 00007fa126c25fa0 R15: 00007ffca3021ec8 [ 99.340501][ T3302] [ 99.699492][ T1778] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 99.804200][ T3262] bridge_slave_1: left allmulticast mode [ 99.809934][ T3262] bridge_slave_1: left promiscuous mode [ 99.815587][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.827565][ T3262] bridge_slave_0: left allmulticast mode [ 99.889812][ T3262] bridge_slave_0: left promiscuous mode [ 99.897619][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.930526][ T1778] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 99.969519][ T1778] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.009485][ T1778] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 100.032611][ T1778] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.046386][ T1778] usb 7-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 100.068740][ T3262] veth1_macvtap: left promiscuous mode [ 100.071910][ T1778] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.095775][ T3262] veth0_vlan: left promiscuous mode [ 100.096784][ T1778] usb 7-1: config 0 descriptor?? [ 100.242566][ T3322] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 100.405965][ T67] usb 5-1: USB disconnect, device number 8 [ 100.523433][ T3262] bridge_slave_1: left allmulticast mode [ 100.531821][ T1778] input: HID 0738:1709 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0738:1709.0016/input/input23 [ 100.546501][ T3262] bridge_slave_1: left promiscuous mode [ 100.554924][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.563204][ T3262] bridge_slave_0: left allmulticast mode [ 100.568876][ T3262] bridge_slave_0: left promiscuous mode [ 100.574538][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 100.574554][ T36] audit: type=1400 audit(1789713467.747:435): avc: denied { search } for pid=96 comm="acpid" name="dev" dev="sda1" ino=1262 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 100.602872][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.611376][ T1778] saitek 0003:0738:1709.0016: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.6-1/input0 [ 100.823336][ T3262] veth1_macvtap: left promiscuous mode [ 100.839115][ T3262] veth0_vlan: left promiscuous mode [ 100.846926][ T1778] usb 7-1: USB disconnect, device number 4 [ 101.175318][ T3351] FAULT_INJECTION: forcing a failure. [ 101.175318][ T3351] name failslab, interval 1, probability 0, space 0, times 0 [ 101.237017][ T3351] CPU: 0 UID: 0 PID: 3351 Comm: syz.8.1243 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 101.237054][ T3351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.237070][ T3351] Call Trace: [ 101.237078][ T3351] [ 101.237087][ T3351] __dump_stack+0x21/0x30 [ 101.237128][ T3351] dump_stack_lvl+0x140/0x1c0 [ 101.237163][ T3351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.237207][ T3351] ? avc_has_extended_perms+0x94b/0xe60 [ 101.237240][ T3351] dump_stack+0x19/0x20 [ 101.237273][ T3351] should_fail_ex+0x3c2/0x510 [ 101.237303][ T3351] should_failslab+0xac/0x100 [ 101.237335][ T3351] __kmalloc_cache_node_noprof+0x46/0x430 [ 101.237363][ T3351] ? __get_vm_area_node+0x150/0x390 [ 101.237400][ T3351] __get_vm_area_node+0x150/0x390 [ 101.237436][ T3351] __vmalloc_node_range_noprof+0x340/0x1300 [ 101.237473][ T3351] ? kvm_dev_ioctl+0x12a/0x14c0 [ 101.237495][ T3351] ? number+0xc9d/0xf00 [ 101.237535][ T3351] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 101.237573][ T3351] ? vsnprintf+0x19ef/0x1ad0 [ 101.237610][ T3351] ? kvm_dev_ioctl+0x12a/0x14c0 [ 101.237632][ T3351] __vmalloc_noprof+0x104/0x1d0 [ 101.237653][ T3351] ? kvm_dev_ioctl+0x12a/0x14c0 [ 101.237674][ T3351] ? alloc_fd+0x4c1/0x570 [ 101.237701][ T3351] ? __cfi___vmalloc_noprof+0x10/0x10 [ 101.237725][ T3351] kvm_dev_ioctl+0x12a/0x14c0 [ 101.237747][ T3351] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 101.237769][ T3351] ? bpf_lsm_file_ioctl+0xd/0x20 [ 101.237800][ T3351] ? security_file_ioctl+0x3e/0x110 [ 101.237823][ T3351] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 101.237844][ T3351] __se_sys_ioctl+0x123/0x1b0 [ 101.237874][ T3351] __x64_sys_ioctl+0x7f/0xa0 [ 101.237903][ T3351] x64_sys_call+0x1878/0x2ee0 [ 101.237924][ T3351] do_syscall_64+0x57/0xf0 [ 101.237946][ T3351] ? clear_bhb_loop+0x50/0xa0 [ 101.237978][ T3351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.238006][ T3351] RIP: 0033:0x7f54df19e159 [ 101.238027][ T3351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.238058][ T3351] RSP: 002b:00007f54e0061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.238083][ T3351] RAX: ffffffffffffffda RBX: 00007f54df425fa0 RCX: 00007f54df19e159 [ 101.238101][ T3351] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 101.238115][ T3351] RBP: 00007f54df23506b R08: 0000000000000000 R09: 0000000000000000 [ 101.238130][ T3351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.238144][ T3351] R13: 00007f54df426038 R14: 00007f54df425fa0 R15: 00007ffef55b7f08 [ 101.238166][ T3351] [ 101.779513][ T67] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 101.940833][ T67] usb 7-1: unable to get BOS descriptor or descriptor too short [ 101.949300][ T67] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 101.962047][ T67] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 101.971351][ T67] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.979379][ T67] usb 7-1: Product: syz [ 102.003305][ T67] usb 7-1: Manufacturer: syz [ 102.007962][ T67] usb 7-1: SerialNumber: syz [ 102.218774][ T67] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 102.374105][ T3377] syzkaller1: entered promiscuous mode [ 102.384057][ T3377] syzkaller1: entered allmulticast mode [ 102.593355][ T3379] EXT4-fs warning: 99 callbacks suppressed [ 102.593374][ T3379] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.615554][ T3379] EXT4-fs error: 8009 callbacks suppressed [ 102.615571][ T3379] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.634232][ T3379] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.650148][ T3379] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.662939][ T3379] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.678982][ T3379] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.691726][ T3379] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.707672][ T3379] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.720562][ T3379] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.736480][ T3379] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.954029][ T3381] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.969769][ T3381] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 102.982319][ T3381] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 102.998039][ T3381] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 103.010608][ T3381] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.026319][ T3381] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 103.039570][ T67] usb 7-1: failed to enable PITCH for EP 0x82 [ 103.045798][ T3381] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.061560][ T67] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 103.070223][ T3381] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 103.082654][ T67] usb 7-1: clock source 0 is not valid, cannot use [ 103.089496][ T3381] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.105240][ T67] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 103.111695][ T3381] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 103.124146][ T67] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 103.149616][ T67] usb 7-1: USB disconnect, device number 5 [ 104.034865][ T36] audit: type=1400 audit(1789713471.207:436): avc: denied { bind } for pid=3399 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.089499][ T36] audit: type=1400 audit(1789713471.207:437): avc: denied { setopt } for pid=3399 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.121579][ T36] audit: type=1400 audit(1789713471.237:438): avc: denied { read } for pid=3399 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.517553][ T3409] Source file dentry negative [ 106.067137][ T3442] device-mapper: ioctl: Invalid target message parameters. [ 106.840320][ T36] audit: type=1326 audit(1789713474.017:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3457 comm="syz.6.1270" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a3f79e159 code=0x0 [ 107.634504][ T3474] syzkaller1: entered promiscuous mode [ 107.651672][ T3474] syzkaller1: entered allmulticast mode [ 107.683411][ T111] EXT4-fs warning: 130 callbacks suppressed [ 107.683429][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 107.704848][ T111] EXT4-fs error: 130 callbacks suppressed [ 107.704866][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 107.774071][ T111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 107.781238][ T3475] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.789332][ T111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 107.805669][ T3475] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 107.832058][ T3475] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.849197][ T3475] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 107.861713][ T3475] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.877423][ T3475] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 107.889978][ T3475] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.905671][ T3475] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 107.918203][ T3475] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.934076][ T3475] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 108.138989][ T3477] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 108.154744][ T3477] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 108.167515][ T3477] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 108.183578][ T3477] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 108.196287][ T3477] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 108.212163][ T3477] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 108.294987][ T36] audit: type=1400 audit(1789713475.467:440): avc: denied { setattr } for pid=3479 comm="syz.8.1273" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.318039][ T3482] rust_binder: 3481:3482 error while translating object: EPERM [ 108.336067][ T3482] rust_binder: Failure in copy_transaction_data: EPERM [ 108.336103][ T3482] rust_binder: 3481:3482 transaction call to 3481:0 failed EPERM, code 0 size 72-24 [ 108.369518][ T36] audit: type=1400 audit(1789713475.497:441): avc: denied { transfer } for pid=3481 comm="syz.6.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 108.385795][ T397] rust_binder: 3481: undelivered TRANSACTION_ERROR: 29201 [ 108.842882][ T397] rust_binder: 397:397 release transaction 20 in, still active SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=9 req=1226 state=3 status=67 (errno 32: Broken pipe) [ 109.535110][ T36] audit: type=1400 audit(1789713476.707:442): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1522]" dev="pipefs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 109.610891][ T36] audit: type=1400 audit(1789713476.737:443): avc: denied { search } for pid=286 comm="sshd-session" name="dev" dev="sda1" ino=1262 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 109.649690][ T36] audit: type=1400 audit(1789713476.807:444): avc: denied { execmem } for pid=3504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 109.994759][ T3261] bridge_slave_1: left allmulticast mode [ 110.000510][ T3261] bridge_slave_1: left promiscuous mode [ 110.006181][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.014294][ T3261] bridge_slave_0: left allmulticast mode [ 110.023883][ T3261] bridge_slave_0: left promiscuous mode [ 110.029813][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.037877][ T3261] bridge_slave_1: left allmulticast mode [ 110.043875][ T3261] bridge_slave_1: left promiscuous mode [ 110.049697][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.057400][ T3261] bridge_slave_0: left allmulticast mode [ 110.063441][ T3261] bridge_slave_0: left promiscuous mode [ 110.069108][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.235788][ T3261] veth1_macvtap: left promiscuous mode [ 110.241417][ T3261] veth0_vlan: left promiscuous mode [ 110.246951][ T3261] veth1_macvtap: left promiscuous mode [ 110.252830][ T3261] veth0_vlan: left promiscuous mode [ 114.041379][ T195] EXT4-fs warning: 45 callbacks suppressed [ 114.041401][ T195] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 114.062626][ T195] EXT4-fs error: 47 callbacks suppressed [ 114.062643][ T195] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #121: comm crond: checksumming directory block 0